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An interface device comprising: 

a first interface for receiving data fronn a first zone in a first zone data format; 

means for processing said received data through performance of a 
cryptographic operation on at least a portion thereof; 



a second interface for sending said processed data to a second zone in a 
second zone data jformat; and 



means arranged to pass said processed data exclusively from said processing 
means to said second interface. 



An interface device as claimed in claim 1 further comprising: 



nneans arranged to convert said received data in said first zone data format 
into at least one data format other than said first zone data format prior to 
said data processing. 



An interface device as claimed in claim 1 or claim 2 further comprising: 

means arranged to transfornVthe data format of said received data from said 
first zone at least twice prior toVsaid data processing. 

An interface device as claimed in arw preceding claim in which said first zone 
data format is packetised data, furtherycomprising: 



means for reading at least one item of ioentification data from each packet; 
wherein \ 
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said processing means is/ arranged to process each respective packet in 
dependence on the or eacn corresponding itenn of identification data. 

5. An interface device as claimed in claim 4 further comprising: 

a store for storing one or more rules, each rule being linked with at least one 
of item of identification/data; wherein 



said processing means 
the rule linked with the 



is arranged to process each packet in dependence upon 
corresponding item(s) of identification data. 



6. An interface deVice as claimed in any preceding claim wherein one of the first 
and second interrteces is suitable for connection to a host such that the data 
format utilised by s\ch a connected interface is one utilised by the host. 



An interface device acclaimed in claim 6 when depending on claim 5 in 
which, in response to recJeiving at least one control packet including at least 
an item of control identification data and control instructions through the 
interface not connected toVhe host and reading said item of control 
identification data from a controlSjDacket, said processing means is arranged to 
change said rules in said store in ck^pendence upon said corresponding control 
instructions. 

8. An interface device comprising: 

a first interface for receiving data from a first authorised party in a first data 
format; 

means for processing said received data through performance of a 
computational operation on at least a portion thereof; 



a second interface for sending said processed data to a second authorised 
party in a second data format; 
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means arranged to pas|s 
means to said second i 



said processed data exclusively from said processing 
nterface; 



wherein said operation 
sent processed data is i 
received data from said 



performed by said processing means is such that if said 
ntercepted by an unauthorised party, the recovery of said 
processed data is computationally unfeasible. 



9. A method of operating an interface device comprising: 

— 

processing said received data through performance of a cryptographic 
operation on at least/a portion thereof; 

passing said processed data exclusively from said processing means to a 
second interface; anxd 



sending said processed data from said second interface to a second zone in a 
second zone data fprmat. 

10. A method of operating an interface device as claimed in claim 9 further 
comprising: 

converting said received data in said first zone data format into at least one 



further data format 



prior to said processing. 




1.A method of operating an interf^e device as claimed in claim 9 or claim 10 
further comprising transforming thes^data format of said received data from 
said first zone at least twice prior to said processing. 
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12. A method of operating an interface device comprising: 
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receiving data at a first interface from a first authorised party in a first data 
format; 



processing said received daia through performance of a computational 
operation on at least a portion /thereof; 

passing said processed data ekclusiveiy to a second interface; 



sending said processed data from said second interface to a second authorised 
party in a second data format; 



wherein said performance of sa 
processed data is intercepted 
received data from said process 



d computational operation is such that if said sent 
by an unauthorised party, the recovery of said 
ed data is computationally unfeasible. 



